$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5972f5e-b33f-33a5-a006-0fb616a1c0b2.roa File: a5972f5e-b33f-33a5-a006-0fb616a1c0b2.roa (raw, json) Hash identifier: uuGrJT5wQn0lrq6f/FuTISsOzd6GUuJYNcNHXrY3ssk= Subject key identifier: A9:E9:3F:94:D7:3B:28:7E:8A:8F:83:AE:66:09:1A:30:A1:D2:09:7F Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A9FFBB16776F374C0A6A4A900 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5972f5e-b33f-33a5-a006-0fb616a1c0b2.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 396578 IP address blocks: 216.87.145.53/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:b1:67:76:f3:74:c0:a6:a4:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=0f66466c-f86e-4aa4-8073-4b0bc3fb92d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1f:8a:13:00:60:c5:8c:e1:63:61:28:a0:e8: 65:1a:e2:7c:31:30:87:83:11:01:7b:1a:70:a7:38: e4:40:e5:41:7a:3e:a5:8e:80:e0:3c:39:32:ae:02: 71:29:07:2a:6a:ed:2d:48:02:1e:63:7b:09:e7:f3: 33:eb:25:fb:0d:4a:19:9f:63:5a:06:b1:e8:90:49: 8c:ae:3e:a8:40:24:d5:5f:2c:e2:76:79:08:66:d2: 3c:1a:56:5d:db:a5:ae:84:9a:c6:a8:f0:ae:a7:e3: 1e:3a:70:d6:32:a6:ce:08:04:98:85:af:f1:e7:29: cd:68:82:e6:23:42:c3:39:7b:b3:0f:91:d7:25:54: 1e:a3:4d:5d:c0:49:49:74:35:5f:c7:24:aa:6e:fd: d2:44:0a:72:86:d2:07:45:9a:f7:c2:27:ac:7c:77: 00:1b:d0:8f:29:20:4a:83:a1:95:4a:fd:82:1f:fe: db:f0:c3:69:fa:23:f2:61:8d:2e:24:34:42:f3:8c: c8:89:62:2b:6e:0b:08:ec:a6:32:25:ff:14:f9:ef: 4b:64:78:15:e1:81:ef:f9:df:65:82:d4:ea:11:9e: 33:04:17:fa:76:82:7d:e4:3a:44:a8:12:02:f4:7a: cb:90:b0:ce:23:cd:01:06:4f:a9:7e:92:3c:ff:48: 7c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E9:3F:94:D7:3B:28:7E:8A:8F:83:AE:66:09:1A:30:A1:D2:09:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/a5972f5e-b33f-33a5-a006-0fb616a1c0b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 216.87.145.53/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:b8:09:60:a7:eb:e6:63:2c:9d:6e:8e:d3:de:e3:ee:0c:82: 55:b8:53:80:37:82:70:ec:2d:f9:99:14:cd:2d:37:5c:76:91: fa:04:a1:27:93:65:b3:2d:bf:85:93:a5:06:fa:ea:07:80:a5: 8c:8f:a5:35:bc:7e:76:37:95:2a:c9:58:e9:d3:26:bf:05:8d: 2b:c6:e1:3c:95:52:fb:2b:38:5b:31:ac:a6:af:0c:01:57:40: 99:5f:a3:55:98:02:ca:bb:52:c3:18:74:e4:3d:72:2f:69:e9: 00:09:40:d3:03:5d:b1:03:63:29:4a:47:8d:2c:8e:e5:13:d3: e5:32:d2:00:b9:1b:b4:d2:cd:53:d7:e5:03:d8:86:5d:43:6b: be:90:b1:a7:81:04:8c:9d:bc:eb:7f:04:3d:20:6d:ef:91:b6: a3:ff:81:42:80:d4:77:3d:4a:43:75:c1:34:cd:ee:aa:2e:bd: 9f:15:f4:0c:a9:ac:a5:79:3d:e7:8d:fc:77:ac:10:c6:3d:d8: 1b:b7:09:a3:9e:ff:60:79:7a:3e:73:85:61:4d:6c:df:9b:7f: 57:a8:e5:81:cb:9d:fd:af:6a:3e:5c:dc:88:ef:ee:82:72:c5: 42:5d:4f:95:52:d2:e0:7e:96:5b:fb:6f:ae:84:bb:f5:a6:40: 9d:c9:96:14 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEqf+7FndvN0wKakqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk MGY2NjQ2NmMtZjg2ZS00YWE0LTgwNzMtNGIwYmMzZmI5MmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx+KEwBgxYzhY2EooOhlGuJ8MTCHgxEBexpw pzjkQOVBej6ljoDgPDkyrgJxKQcqau0tSAIeY3sJ5/Mz6yX7DUoZn2NaBrHokEmM rj6oQCTVXyzidnkIZtI8GlZd26WuhJrGqPCup+MeOnDWMqbOCASYha/x5ynNaILm I0LDOXuzD5HXJVQeo01dwElJdDVfxySqbv3SRApyhtIHRZr3wiesfHcAG9CPKSBK g6GVSv2CH/7b8MNp+iPyYY0uJDRC84zIiWIrbgsI7KYyJf8U+e9LZHgV4YHv+d9l gtTqEZ4zBBf6doJ95DpEqBIC9HrLkLDOI80BBk+pfpI8/0h8SQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKnpP5TXOyh+io+DrmYJGjCh0gl/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvYTU5NzJmNWUtYjMzZi0z M2E1LWEwMDYtMGZiNjE2YTFjMGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA2FeRNTBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCMuAlgp+vmYyydbo7T3uPuDIJVuFOAN4Jw7C35mRTNLTdcdpH6BKEn k2WzLb+Fk6UG+uoHgKWMj6U1vH52N5UqyVjp0ya/BY0rxuE8lVL7KzhbMaymrwwB V0CZX6NVmALKu1LDGHTkPXIvaekACUDTA12xA2MpSkeNLI7lE9PlMtIAuRu00s1T 1+UD2IZdQ2u+kLGngQSMnbzrfwQ9IG3vkbaj/4FCgNR3PUpDdcE0ze6qLr2fFfQM qayleT3njfx3rBDGPdgbtwmjnv9geXo+c4VhTWzfm39XqOWBy539r2o+XNyI7+6C csVCXU+VUtLgfpZb+2+uhLv1pkCdyZYU -----END CERTIFICATE-----Generated at Mon Aug 4 22:16:32 2025 by rpki-client